CVE-2025-53810

CVE-2025-53810 describes a type confusion vulnerability in Windows Defender Firewall Service that allows an authorized local attacker to escalate privileges. The connected NC SC/ENISA-style document confirms the affected component as Windows Defender Firewall Service and lists the impact as obtai...

CVE-2025-55688

CVE-2025-55688 is a Windows Privilege Escalation vulnerability affecting the Windows PrintWorkflowUserSvc. The issue is described as a use-after-free in PrintWorkflowUserSvc that can allow an authorized local attacker to elevate privileges. The practical impact is local elevation of privileges wi...

CVE-2025-55693

CVE-2025-55693 is a Windows Kernel elevation-of-privilege vulnerability caused by a use-after-free in the Windows Kernel. It allows a local attacker to escalate privileges. Public exploits exist per connected advisories, and Microsoft has released updates (MSRC) to fix the issue; apply the corres...

CVE-2025-58735

CVE-2025-58735 is a Use-after-free vulnerability in Inbox COM Objects leading to local code execution. The base CVSS v3.1 score is 7.0 (HIGH) with LOCAL attackVector, HIGH impact on confidentiality/integrity/availability, and user interaction required. Connected MSKB/NCSC entries confirm a Window...

CVE-2025-59207

CVE-2025-59207 is an elevation-of-privilege vulnerability in the Windows Kernel caused by an untrusted pointer dereference, enabling a locally authenticated attacker to elevate privileges. The Initial Description confirms the vulnerability type and impact. The Connected Documents provide Windows-...

CVE-2025-62461

CVE-2025-62461 is a Windows Projected File System Filter Driver elevation-of-privilege vulnerability caused by a buffer over-read. It allows an authorized local attacker to elevate privileges. Public sources (NCSC/NVD-style listings) assign a CVSS v3.1 base score of 7.8 (High) with Local attack v...

CVE-2026-20826

CVE-2026-20826 describes a race-condition in the Tablet Windows User Interface (TWINUI) Subsystem. The initial entry asserts an information disclosure/elevation of privileges vector via concurrent access to a shared resource, enabling an authorized attacker to elevate privileges locally. Microsof...

CVE-2026-20843

CVE-2026-20843 describes an Elevation of Privilege in Windows Routing and Remote Access Service (RRAS) due to improper access control. The CVE is confirmed by multiple feeds; affected is RRAS on Windows. The reported impact is local privilege escalation for an authorized attacker with low privile...

CVE-2026-20869

CVE-2026-20869 affects Windows Local Session Manager (LSM) and is described as a race-condition vulnerability in the management of a shared resource that allows an authenticated, local attacker to elevate privileges. The initial CVE entry cites local privilege escalation with a high impact. Micro...

CVE-2026-21221

CVE-2026-21221 maps to a race-condition in the Capability Access Management Service (camsvc) that allows a locally authenticated attacker to obtain elevated privileges. The root cause is concurrent execution with improper synchronization on a shared resource. The vulnerability is associated with ...

CVE-2026-21240

CVE-2026-21240 describes a local, authenticated TOCTOU race in Windows HTTP.sys that can allow privilege escalation. Affected component: Windows HTTP.sys. Root cause: time-of-check/time-of-use race condition. Impact: high (local escalation of privileges, potential confidentiality, integrity, and ...

CVE-2026-27925

CVE-2026-27925 concerns a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that allows an adjacent-network attacker to disclose information. Affected component: Windows UPnP Device Host (upnp.dll). Impact as described: information disclosure with high confidentiality impact; n...

CVE-2026-32084

CVE-2026-32084 is a Windows vulnerability labeled as a Windows Print Spooler information-disclosure issue with local access and potential exposure of sensitive data via Windows File Explorer. The CVE entry notes local attack vector, low attack complexity, and low privileges required, with a high ...

CVE-2026-32150

CVE-2026-32150 is a local privilege-escalation vulnerability in Windows Function Discovery Service (fdwsd.dll) caused by a race condition from concurrent access to a shared resource. An authenticated, local attacker could elevate privileges. Public references indicate the issue is addressed by Mi...

CVE-2026-48572

CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...

CVE-2026-49791

CVE-2026-49791 affects Windows Routing and Remote Access Service (RRAS). The issue is an improper link resolution before file access (link following) that can allow an authorized, local attacker to elevate privileges. The vulnerability is triggered locally with low attack complexity and low privi...

CVE-2026-50296

CVE-2026-50296 is a use-after-free vulnerability in the DirectX Graphics Kernel that allows an authorized, local attacker to elevate privileges. The cited CVSS 3.1 vector is LOCAL, with HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges with no user interacti...

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

CVE-2026-50385

CVE-2026-50385 affects Windows Runtime. The issue is a race-condition in a shared resource during concurrent execution, enabling a locally authenticated attacker to elevate privileges. Public details in connected sources confirm the vulnerability, its local privilege-escalation impact, and the Wi...

CVE-2026-50396

CVE-2026-50396 is a Windows Kernel-Mode Driver vulnerability described as a use-after-free in kernel-mode drivers that can allow an authenticated attacker to elevate privileges locally. The issue affects Windows kernel components classified under Windows Kernel-Mode Drivers and is mapped to CVSS ...

CVE-2026-50445

CVE-2026-50445 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by a buffer over-read. An unauthenticated, remote attacker could disclose memory information over the network. Microsoft and partners have released updates (MSRC guidance) to address this vulnera...

CVE-2026-50456

CVE-2026-50456 is a Windows File Explorer information disclosure vulnerability. A local attacker with low privileges and no user interaction can access sensitive information due to the underlying issue in Windows File Explorer. The CVSS.3.1 score is 5.5 (Medium), with attack vector Local, impact...

CVE-2026-50503

CVE-2026-50503 is a Windows Runtime elevation-of-privilege vulnerability caused by a race condition from improper synchronization on a shared resource. The issue allows an authorized, low-privilege attacker to potentially gain higher privileges locally. Exploitation status is not detailed in the ...

CVE-2026-54989

CVE-2026-54989 is a use-after-free in the Quality Windows Audio/Video Experience (QWAVE) service that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 metrics describe a Local attack with High impact on confidentiality, integrity, and availability, requiring LOW privil...

CVE-2026-54995

CVE-2026-54995 refers to a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST). The flaw could allow an unauthenticated attacker to execute arbitrary code over the network. Public references in the provided docs (NVD, MSRC update guidance, and patch reviews) c...

CVE-2026-61933

CVE-2026-61933 describes an out-of-bounds read in the Windows DWM Core Library that can allow a locally authorized attacker to disclose information. The CVE entry, with a CVSSv3.1 base score of 5.5 (Medium) and local access requiring low privileges and no user interaction, indicates impact is con...

CVE-2025-53131

CVE-2025-53131 is a heap-based buffer overflow in Windows Media that could allow an unauthenticated attacker to execute code over the network. The Connected documents show Windows security updates in August 2025 (and related servicing stack updates) addressing Windows Media and other components, ...

CVE-2025-55684

CVE-2025-55684 is a local elevation-of-privilege vulnerability in Windows PrintWorkflowUserSvc caused by a use-after-free condition. It affects Windows components related to printing workflows, allowing an authenticated local attacker to escalate privileges. Public exploits are noted in at least ...

CVE-2025-58716

CVE-2025-58716 affects Microsoft Windows Speech and is caused by improper input validation, enabling an authorized attacker to perform local privilege escalation. The CVE is documented with a CVSS v3.1 base score of 8.8 (High) and LOCAL attack vector, requiring LOW privileges and no user interact...

CVE-2025-58732

CVE-2025-58732 is described as a use-after-free in Inbox COM Objects that enables local code execution. The Connected Documents provide broader Windows security updates (KBs and advisories) but do not specify a vendor/product remediation or a patch explicit to this CVE in the provided materials. ...

CVE-2025-59216

CVE-2025-59216 concerns Microsoft Graphics Component, a graphics driver component. The vulnerability arises from a race-condition caused by improper synchronization when accessing a shared resource, enabling a local attacker with low privileges to elevate privileges. Public sources describe the i...

CVE-2025-59255

CVE-2025-59255 is a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. Connected documents confirm the affected component (Windows DWM Core Library) and the local privilege escalation impact but do not provide explicit exp...

CVE-2025-59512

Technical details about CVE-2025-59512, including affected product, root cause, exploitability or remediation, are not publicly provided in the supplied Connected Documents. Monitor for official updates (mitigations/patches) as newer MSKBs may cover this CVE.

CVE-2025-62464

CVE-2025-62464 is a Windows Projected File System Elevation of Privilege vulnerability (buffer over-read) that could allow an authorized local attacker to gain higher privileges. Affected product: Windows Projected File System (ProjFS) components; root cause described as a buffer over-read in Pro...

CVE-2026-20815

CVE-2026-20815 is a race condition in the Capability Access Management Service (camsvc) that allows a locally authenticated user to elevate privileges. The vulnerability arises from concurrent execution on a shared resource with improper synchronization. Microsoft and multiple security bulletins ...

CVE-2026-20819

CVE-2026-20819 is a local-information-disclosure vulnerability in Windows Virtualization-Based Security (VBS) Enclave. The root cause is an untrusted pointer dereference in the VBS Enclave, enabling an authorized attacker to disclose information locally. Public details identify affected Windows b...

CVE-2026-20836

CVE-2026-20836 is a Windows graphics kernel vulnerability where a race condition in a shared resource allows local privilege elevation. The issue stems from concurrent execution with improper synchronization in the Graphics Kernel. The impact is local privilege escalation (C:H/I:H/A:H per CVSS 3....

CVE-2026-20877

CVE-2026-20877 is a use-after-free vulnerability in Windows Management Services that enables a locally authenticated attacker to elevate privileges. The NVD entry specifies a CVSS v3.1 base score of 7.8 (AV: Local, AC: High, PR: Low, UI: None, S: Changed, C/I/A: High). Connected documents referen...

CVE-2026-20937

CVE-2026-20937 affects Windows File Explorer and is described as an information-disclosure vulnerability allowing a locally authorized attacker to disclose information. The provided documents confirm a Windows File Explorer exposure, with CVSS 3.1/5.5 (Local access, Low attack complexity, High co...

CVE-2026-23671

CVE-2026-23671 is a Windows Bluetooth RFCOM Protocol Driver elevation of privilege vulnerability. A locally exposed issue could allow an attacker with low privileges and no user interaction to escalate privileges via the Bluetooth stack’s RFCOM Protocol Driver; exploitation maturity is UNPROVEN. ...

CVE-2026-24285

Technical details about CVE-2026-24285 are not provided in the given documents. Monitor for updates from Microsoft and CVE records for affected products, impact, and mitigations.

CVE-2026-24292

CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...

CVE-2026-25185

Technical details (affected products, components, root cause, impact, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-27911

Technical details not publicly available in the provided documents. Monitor for updates on affected products, vulnerable component, impact, and remediation.

CVE-2026-32083

CVE-2026-32083 pertains to Windows’ Simple Search and Discovery Protocol (SSDP) Service elevation of privilege. The vulnerability is local, with low privileges required and no user interaction, and yields a high impact on confidentiality, integrity, and availability. Microsoft lists an official f...

CVE-2026-35423

Technical details (affected product, root cause, impact, or fixes) are not publicly available in the provided documents. Monitor for updates from NVD/EUVD/CVE listings for additional specifics.

CVE-2026-44800

CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...

CVE-2026-45654

Technical details about CVE-2026-45654 are not publicly available in the provided documents. Monitor for updates from the NVD/CVE records for affected products, root cause specifics, impact, and remediation.

CVE-2026-49167

CVE-2026-49167 is a Windows Kernel use-after-free vulnerability enabling local privilege escalation by an authorized attacker. Affected component: Windows Kernel. Root cause: use-after-free in kernel code leading to elevation of privileges. Impact: local elevation with high confidentiality/integr...

CVE-2026-50311

CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...